CVE-2002-0240: Medium severity Apache HTTP Server vulnerability
PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server via the HTTP OPTIONS method, which reveals the pathname in the resulting error message.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0240?
CVE-2002-0240 has a medium severity rating due to the potential for exposure of sensitive server path information.
How do I fix CVE-2002-0240?
To fix CVE-2002-0240, configure the Apache server to restrict the HTTP OPTIONS method and ensure proper error handling.
What systems are affected by CVE-2002-0240?
CVE-2002-0240 specifically affects Apache HTTP Server version 2.0.28-beta when installed with PHP.
Can CVE-2002-0240 lead to further attacks?
Yes, the exposure of the full pathname may assist attackers in crafting targeted exploits against the server.
When was CVE-2002-0240 disclosed?
CVE-2002-0240 was disclosed in 2002, highlighting a vulnerability in Apache's handling of HTTP OPTIONS requests.